$ rpki-client -vvf repo-rpki.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/3130332e3231332e3233342e302f32332d3234203d3e20313531303033.roa File: 3130332e3231332e3233342e302f32332d3234203d3e20313531303033.roa (raw, json) Hash identifier: i3hO14FAmP26HH8HAkTz0ycXF0lnMsMonXNoC6+e+XQ= Subject key identifier: BB:2C:9D:D2:E4:24:99:EC:3D:F7:CF:52:DD:BA:42:E5:CE:18:B2:0B Certificate issuer: /CN=846D8A4B978C6F595D44EACDB8259295CD43C499 Certificate serial: 3AEDBE073E923EC75A373EFC58A3946B54F8A6EA Authority key identifier: 84:6D:8A:4B:97:8C:6F:59:5D:44:EA:CD:B8:25:92:95:CD:43:C4:99 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/846D8A4B978C6F595D44EACDB8259295CD43C499.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/3130332e3231332e3233342e302f32332d3234203d3e20313531303033.roa Signing time: Sun 31 Dec 2023 07:27:15 +0000 ROA not before: Sun 31 Dec 2023 07:22:15 +0000 ROA not after: Sun 29 Dec 2024 07:27:15 +0000 asID: 151003 IP address blocks: 103.213.234.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/846D8A4B978C6F595D44EACDB8259295CD43C499.crl rsync://repo-rpki.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/846D8A4B978C6F595D44EACDB8259295CD43C499.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/846D8A4B978C6F595D44EACDB8259295CD43C499.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jan 2024 13:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:ed:be:07:3e:92:3e:c7:5a:37:3e:fc:58:a3:94:6b:54:f8:a6:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=846D8A4B978C6F595D44EACDB8259295CD43C499 Validity Not Before: Dec 31 07:22:15 2023 GMT Not After : Dec 29 07:27:15 2024 GMT Subject: CN=BB2C9DD2E42499EC3DF7CF52DDBA42E5CE18B20B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:ea:4d:1c:c0:b7:5b:b0:a7:a9:1e:92:7d:32: 28:10:45:42:fd:9f:fd:2d:94:80:6f:f7:18:69:8f: 4f:30:98:9e:d5:77:24:76:4f:c4:1c:f9:12:e2:b3: 83:2d:30:46:11:81:e0:d3:01:a6:86:9f:e3:df:7b: dd:e6:16:b2:34:89:e4:1c:01:e7:e7:a3:78:87:71: 6e:29:42:0b:2d:04:e0:81:31:71:38:0a:e8:bc:5e: 1b:da:30:2c:43:5c:34:05:d4:04:9d:7a:a2:b3:a5: 10:6a:95:b6:17:40:d8:93:fb:77:c5:bc:7c:66:35: 09:13:d8:a1:7d:d4:cf:cf:de:0d:24:88:7c:2e:1f: 2c:bc:dd:a5:ff:22:d2:56:7e:c5:d2:75:6f:41:0d: aa:fb:92:e6:f0:86:c8:31:d6:47:b0:2e:82:74:f4: 7d:1a:88:af:b5:57:a4:b3:6e:98:28:95:f6:90:e6: cd:fb:e0:23:70:03:09:93:fb:aa:7e:c9:64:80:39: f6:22:5a:08:a9:51:d7:7a:6e:12:88:b1:43:10:0a: d1:52:6e:f8:85:da:21:c9:eb:0c:d9:fa:17:ce:a6: bd:ed:3e:84:4d:6a:fa:2f:c4:1f:02:7f:fe:06:e6: b6:d7:5e:a9:80:37:21:4a:e4:d9:53:81:df:ca:78: fc:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:2C:9D:D2:E4:24:99:EC:3D:F7:CF:52:DD:BA:42:E5:CE:18:B2:0B X509v3 Authority Key Identifier: keyid:84:6D:8A:4B:97:8C:6F:59:5D:44:EA:CD:B8:25:92:95:CD:43:C4:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/846D8A4B978C6F595D44EACDB8259295CD43C499.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/846D8A4B978C6F595D44EACDB8259295CD43C499.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/3130332e3231332e3233342e302f32332d3234203d3e20313531303033.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.213.234.0/23 Signature Algorithm: sha256WithRSAEncryption a0:0d:30:ff:1f:d4:3d:a9:b4:3e:48:89:c4:25:2c:87:3a:fc: 6a:59:48:8f:34:97:5d:77:66:88:c9:69:c4:a5:07:f8:c5:1e: e6:46:bb:dd:d3:4c:d7:3e:98:6f:6b:9e:2e:7a:5f:bc:d2:e4: 21:d9:39:52:d0:97:ef:bc:0f:0f:33:41:ec:fd:7c:51:39:17: 75:43:dd:f0:30:10:af:f4:cf:e4:24:48:87:47:d4:83:c1:54: b3:18:8a:ea:7a:96:68:aa:aa:5a:b0:20:5a:5f:aa:a9:3f:cd: 35:43:3a:1a:26:5c:54:1d:99:04:ed:7d:6c:2f:90:59:4d:64: 03:ff:ca:bb:aa:d4:56:e8:6f:13:cd:08:0b:47:50:58:f0:8b: 0c:55:ed:9b:60:3c:da:ce:1b:8b:6e:d9:8d:d3:bc:17:d5:3d: 4e:fa:19:8a:fe:48:3d:6b:1f:d6:b6:2d:f3:69:e1:f9:07:43: b8:20:bf:09:66:8f:02:18:fc:5d:d9:51:db:51:fc:6a:8a:07: a0:4d:f4:0f:2e:43:ac:3b:4e:d0:de:9c:37:75:26:1c:e9:fe: 3f:c3:73:bc:b3:76:38:e4:9c:e1:f6:97:8d:72:e3:8c:43:e7: e3:04:55:de:fd:01:0b:5e:b1:3c:14:01:d5:e8:86:0c:35:03: b1:91:70:f8 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUOu2+Bz6SPsdaNz78WKOUa1T4puowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQ2RDhBNEI5NzhDNkY1OTVENDRFQUNEQjgyNTkyOTVD RDQzQzQ5OTAeFw0yMzEyMzEwNzIyMTVaFw0yNDEyMjkwNzI3MTVaMDMxMTAvBgNV BAMTKEJCMkM5REQyRTQyNDk5RUMzREY3Q0Y1MkREQkE0MkU1Q0UxOEIyMEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDb6k0cwLdbsKepHpJ9MigQRUL9 n/0tlIBv9xhpj08wmJ7VdyR2T8Qc+RLis4MtMEYRgeDTAaaGn+Pfe93mFrI0ieQc Aefno3iHcW4pQgstBOCBMXE4Cui8XhvaMCxDXDQF1ASdeqKzpRBqlbYXQNiT+3fF vHxmNQkT2KF91M/P3g0kiHwuHyy83aX/ItJWfsXSdW9BDar7kubwhsgx1kewLoJ0 9H0aiK+1V6SzbpgolfaQ5s374CNwAwmT+6p+yWSAOfYiWgipUdd6bhKIsUMQCtFS bviF2iHJ6wzZ+hfOpr3tPoRNavovxB8Cf/4G5rbXXqmANyFK5NlTgd/KePzDAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUuyyd0uQkmew9989S3bpC5c4YsgswHwYDVR0j BBgwFoAUhG2KS5eMb1ldROrNuCWSlc1DxJkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZDdmYTIxMC01ZjI1LTRmMGItODlhNS03ZDAwYTM1NGE5MDcvMC84NDZEOEE0Qjk3 OEM2RjU5NUQ0NEVBQ0RCODI1OTI5NUNENDNDNDk5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODQ2RDhBNEI5NzhDNkY1OTVENDRFQUNEQjgyNTkyOTVDRDQz QzQ5OS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2JkN2ZhMjEwLTVmMjUtNGYwYi04 OWE1LTdkMDBhMzU0YTkwNy8wLzMxMzAzMzJlMzIzMTMzMmUzMjMzMzQyZTMwMmYz MjMzMmQzMjM0MjAzZDNlMjAzMTM1MzEzMDMwMzMucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFn1eowDQYJ KoZIhvcNAQELBQADggEBAKANMP8f1D2ptD5IicQlLIc6/GpZSI80l113ZojJacSl B/jFHuZGu93TTNc+mG9rni56X7zS5CHZOVLQl++8Dw8zQez9fFE5F3VD3fAwEK/0 z+QkSIdH1IPBVLMYiup6lmiqqlqwIFpfqqk/zTVDOhomXFQdmQTtfWwvkFlNZAP/ yruq1FbobxPNCAtHUFjwiwxV7ZtgPNrOG4tu2Y3TvBfVPU76GYr+SD1rH9a2LfNp 4fkHQ7ggvwlmjwIY/F3ZUdtR/GqKB6BN9A8uQ6w7TtDenDd1Jhzp/j/Dc7yzdjjk nOH2l41y44xD5+MEVd79AQtesTwUAdXohgw1A7GRcPg= -----END CERTIFICATE-----Generated at Tue Jan 9 13:43:25 2024 by rpki-client on console.sobornost.net